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DETAILED ACTION 

1. Applicant's amendment filed on Feb. 08, 2008 has been entered. Claims 33-64 are pending. 
Claims 33, 59 and 64 are amended by the applicant. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for 
the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or In public use or on sale In this 
country, more than one year prior to the date of application for patent in the United States. 

2. Claim 33-48, 51, 52, 59, 63 and 64 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Davies (WO 93/11511). 

As per claim 33 . Davis discloses: 

presenting a human ability challenge having a response component, the human ability challenge having 
distorted content that reduces the possibility of automated computerized identification of the content [Fig. 2, 
3, 5, 7, page 2 lines 24-28, page 8 lines 1-12]; receiving a response to the human ability challenge [page 4 
lines 6-10, Fig. 2, 3, 5, page 8 lines 14-17, 28-36]; and comparing the received response to the response 
component to thereby help determine whether the received response was provided by a human [page 5 
lines 10-19, page 8 lines 14-17]. 

As per claim 34 . the rejection of claim 33 is incorporated and Davis discloses: generating the human ability 
challenge [Fig. 2, 3, 5, 7, page 5 lines 10-19]. 
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As per claim 35 . tlie rejection of claim 34 is incorporated and Davis discloses: generating the human ability 
challenge comprises generating the response component and generating the human ability challenge 
using the response component [Fig. 2, 3, 5, 7]. 

As per claim 36 . the rejection of claim 35 is incorporated and Davis discloses: generating the response 

component comprises randomly generating the response component [page 8 lines 5-7]. 

As per claim 37 . the rejection of claim 35 is incorporated and Davis discloses: generating the human ability 

challenge comprises creating a distorted visual representation of the response component [Fig. 2, 3, 5, 7]. 

As per claim 38 . the rejection of claim 35 is incorporated and Davis discloses: generating the human ability 

challenge comprises creating a distorted audio representation of the response component [page 3 lines 19- 

21]. 

As per claim 39 . the rejection of claim 35 is incorporated and Davis discloses: 

selecting a type of human ability challenge from a plurality of human ability challenge types [page 3 lines 
19-21]. 

As per claim 40 . the rejection of claim 39 is incorporated and Davis discloses: selecting the type of human 
ability challenge comprises randomly selecting the type of human ability challenge [page 3 lines 14-21]. 
As per claim 41 . the rejection of claim 39 is incorporated and Davis discloses: determining the respondent's 

identity, and wherein the step of selecting the type of human [page 4 lines 6-1 2]. 

As per claim 42 . the rejection of claim 39 is incorporated and Davis discloses: generating the response 
component based upon the type of human ability challenge selected [page 3 lines 9-1 1 , 26-36, page 4 
lines 1-4]. 

As per claim 43 . the rejection of claim 39 is incorporated and Davis discloses: selecting the human ability 
challenge from a plurality of stored human ability challenges [page 9 lines 1-12]. 
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As per claim 44 . the rejection of claim 43 is incorporated and Davis discloses: selecting comprises 
randomly selecting the human ability challenge [page 9 lines 1-12]. 

As per claim 45 . the rejection of claim 33 is incorporated and Davis discloses: providing a request for 
authentication for gaining access to a computerized resource, receiving an authentication code, and 
verifying the code responsive to the request for authentication if the received response to the human ability 
challenge matches the response component [page 16 lines 15-18]. 

As per claim 46 . the rejection of claim 33 is incorporated and Davis discloses: receiving a request for 
access to a computerized resource and providing access to the 
resource only if the received response to the human ability challenge matches the response component 
[page 8 lines 1-17]. 

As per claim 47 . the rejection of claim 33 is incorporated and Davis discloses: requesting user confirmation 
of an action and accepting user confirmation only if the received response to the human ability challenge 
matches the response component [page 8 lines 1-26]. 

As per claim 48 . the rejection of claim 33 is incorporated and Davis discloses: presenting a human ability 
challenge comprises presenting one or more graphical images representing the response component 
[page 3 lines 14-18]. 

As per claim 51 , the rejection of claim 33 is incorporated and Davis discloses: presenting a human ability 
challenge comprises presenting a noisy textual image displaying the response component [page 15 lines 
36, Fig. 7]. 

As per claim 52 . the rejection of claim 33 is incorporated and Davis discloses: presenting a human ability 
challenge comprises presenting a natural language question, wherein the response component represents 
an answer to the natural language question [page 3 lines 14-24]. 
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As per claim 59 . it encompasses limitations that are similar to limitations of claim 1 . Thus, it is rejected with 
the same rationale applied against claim 1 above. 

As per claim 63 . the rejection of claim 59 is incorporated and Davis discloses: 

the first, second and third sets of computer program instructions reside on a single computer [Fig.1]. 

As per claim 64 . it encompasses limitations that are similar to limitations of claim 1 . Thus, it is rejected with 

the same rationale applied against claim 1 above. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness rejections 
set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 of this 
title, If the differences between the subject matter sought to be patented and the prior art are such that the subject matter as a 
whole would have been obvious at the time the invention was made to a person having ordinary sl<ill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 49, 50 are rejected under 35 U.S.C. 103(a) as being unpatentable over Davies (WO 
93/1 151 1) and in view of Yamamoto (US Patent No. 5,928,364). 

As per claim 49 . the rejection of claim 33 is incorporated and Davis discloses displaying/presenting the 
human ability challenge as shown in Figs. 2, 3, 5, 7. Davis doesn't expressively mention presenting a 
cognitive question regarding the plurality of graphical images. 
Yamamoto teaches: 

the step of presenting a human ability challenge comprises presenting a plurality of graphical images 
representing identifiable objects and presenting a cognitive question regarding the plurality of graphical 
images, wherein the response component represents an answer to the question [Fig. 8A, 8B, col. 5 lines 
25-60]. 
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Therefore, it would have been obvious to a person of ordinary skill in the art at the time the invention was 
made to combine Yamamoto with Davies, since one would have been motivated to prevent others from 
seeing the secret data easily, password data difficult for others to understand fi^amamoto, col. 1 lines 19- 
20]. 

As per claim 50 . the rejection of claim 33 is incorporated and Davis discloses presenting a human ability 
challenge comprises presenting an audio file (i.e. audio image (voice) [page 3 lines 15-24]. 
Yamamoto teaches: the step of presenting a question, wherein the response component represents an 
answer to the question [Fig. 8A, 8B, col. 5 lines 25-60]. 

4. Claims 53-55, 57, 58, 60-62 are rejected under 35 U.S.C. 103(a) as being unpatentable over Davies 
(WO 93/1 1 51 1 ) and in view of Jalili (US Patent No. 6,209,1 04). 

As per claim 53 , the rejection of claim 33 is incorporated and Davis discloses presenting a human ability 
challenge as shown in Fig. 2, 3, 7. 

Jalili teaches the transmitting the human ability challenge from a server to a client [Fig. 9]. 
Therefore, it would have been obvious to a person of ordinary skill in the art at the time the invention was 
made to combine Jalili with Davies, since one would have been motivated to provide secure data entry 
function for authentication system [Jalili, col. 1 lines 12-13]. 

As per claims 54 and 57 . the rejection of claim 53 is incorporated and Davis discloses presenting a human 
ability challenge as shown in Fig. 2, 3, 7. 

Jalili teaches the transmitting the human ability challenge with the encrypted/hashed response component 
[Fig. 9, col. 2 lines 7-17]. 
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As per claims 55 and 58 , the rejection of claim 54/57 is incorporated and Jalili teaches decrypting/hashing 
the encrypted response component and comparing the decrypted/hashed response component to the 
received response [Fig. 9, col. 2 lines 7-17, Fig. 8]. 

As per claim 56 . the rejection of claim 33 is incorporated and Jalili teaches: receiving a response to the 

human ability challenge comprise transmitting the response from the client to the server [Fig. 9]. 

As per claim 60 . the rejection of claim 59 is incorporated and it encompasses limitations that are similar to 

limitations of claim 53. Thus, it is rejected with the same rationale applied against claim 53 above. 

As per claim 61 . the rejection of claim 60 is incorporated and Jalili teaches: the server comprises a proxy 

server positioned between an application server and the client [Fig. 9]. 

As per claim 62 . the rejection of claim 60 is incorporated and Jalili teaches: the server comprises an 
application server [Fig. 9]. 

Response to Argument 

5. Applicant's arguments filed February 08, 2008 have been fully considered but they are not 
persuasive. 

Regarding to the applicant's argument that "Davis does not identically disclose (or teach or suggest) the 
claimed human ability challenge having distorted content that reduces the possibility of automated 
computerized identification", Examiner disagrees with the applicant since, Davis teaches generating a 
complex image which is included in a set of similar but no identical images. The complex image is 
distinguishable from the other images in the set, by the human senses of a person familiar with the image. 
The complex image is considered to be an image that is recognizable if already known but not readily 
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capable of unique description to a person to wliom it is not known. Tlie complex image that links to the 
authorized user is referred to as a key image for that user. Complex images that do not links with that 
authorized user are referred to as false images. As shown in Fig. 7, various false images (i.e. distorted 
content) are included with the key images (i.e. human ability challenge having distorted content). User is 
able to identify tlie or eacli key image with which his personal identity statement is linked. This is achieved 
by displaying the key images together with false images on a display screen and requiring tine user to enter 
each time an image statement to select the key image. Thus, it reduces the possibility of automated 
computerized identification of the content (because user selects/identifies the key image from the 
presented images) and therefore, it meets the claim limitation "presenting a human ability challenge having 
a response component, the human ability challenge having distorted content that reduces the possibility of 
automated computerized identification of the content". 

For the above reasons, it is believed that the rejections should be sustained. 

Conclusion 

6. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE MONTHS from the 
mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date of this 
final action and the advisory action is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will expire on the date the advisory action is mailed, 
and any extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of the advisory 
action. In no event, however, will the statutory period for reply expire later than SIX MONTHS from the 
date of this final action. 
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Any inquiry concerning tliis communication or earlier communications from tlie examiner should be 
directed to Nirav Patel whose telephone number is 571-272-5936. If attempts to reach the examiner by 
telephone are unsuccessful, the examiner's supervisor, Kim Vu can be reached on 571-272-3859. The fax 
and phone numbers for the organization where this application or proceeding is assigned is 571-273-8300. 
Any inquiry of a general nature or relating to the status of this application or proceeding should be directed 
to the receptionist whose telephone number is 571-272-2100. 



NBP 
4/18/08 

/KIMYEN VU/ 

Supervisory Patent Examiner, Art Unit 2135 



